Assistant Director - Information Security Operations

One of the nation's largest and most respected providers of hospital and healthcare services, Universal Health Services, Inc. (UHS) has built an impressive record of achievement and performance. Growing steadily since its inception into an esteemed Fortune 500 corporation, annual revenues were over $11 billion in 2020. In 2021, UHS was again recognized as one of the World's Most Admired Companies by Fortune; and listed in Forbes ranking of U.S.' Largest Public Companies. Headquartered in King of Prussia, PA, UHS has over 89,000 employees and continues to grow through its subsidiaries. Operating acute care hospitals, behavioral health facilities, outpatient facilities and ambulatory care access points, an insurance offering, a physician network and various related services located all over the U.S. states, Washington, D.C., Puerto Rico and the United Kingdom. www.uhsinc.com

The Corporate Information Services Department is seeking a dynamic and talented Assistant Director-Information Security Operations.

The Assistant Director-Information Security Operations provides leadership to develop a Security Operations Center (SOC) program promoting the security (confidentiality, integrity, and availability) of electronic information or system technologies, processes and people used to support the business mission.

Builds, develops, and manages a talented team of Cybersecurity Analysts supporting the total Information Security Management System (ISMS) program of the organization. Executes initiatives to protect, detect, and respond to security threats and incidents. Evaluates the relevance and threat potential of publicly disclosed or internally discovered vulnerabilities to help determine and prioritize whether, where, when, and how relevant threats are reduced or eliminated. Drive implementation and improvement of new tools, capabilities, frameworks, and methodologies across all teams within the SOC. Coordinates with the broader ISMS program team, CISO, and Senior Management to build a culture that promotes information security throughout the organization.

Serves as an advisor to management and staff to promote a risk-based approach to evaluating threats and prioritizing efforts to reduce or eliminate high risk threats to the security of critical business information assets and infrastructure.

Key Responsibilities include:

• Provides management oversight of cybersecurity SOC (Security Operations Center) including, but not limited to the supervision, performance evaluations, and direction of team.
• Ensures daily management, administration, and maintenance of the SOC's tech stack to achieve operational effectiveness.
• Provides leadership to ensure completion of assigned projects within agreed timelines, budgets, and with available resources.
• Leads security investigations, identify gaps in coverage, and form remediation plans to enhance security controls.
• Develops and disseminates meaningful metrics relevant to the SOC program.
• Revises and develops playbooks and processes to strengthen the current SOC frameworks, review policies and highlight the challenges in meeting SLAs.
• Identifies current and emerging threats to our systems and environment to prevent incidents where possible and actively manages them, as necessary.
• Performs financial and personnel management for team members.
• Works closely with the Director of Information Security and other senior level personnel to further enhance and develop their leadership skills.
• Develops and manages budgets supporting the above activities
• Prepares and, when needed, delivers presentations to Senior Management.

Position Requirements:

• Bachelor's Degree required. Master's Degree preferred.
• Minimum of 8 years information security operations experience that includes 2-3 years management experience and/or 3 years of direct Information Security experience in a multi-facility environment. Healthcare industry experience preferred.
• Possess strong technical analytical skills for project management, process improvement related to workflow processes, training, and development of educational material.
• Able to communicate clearly and respectfully with Executives, and all other personnel.
• Learns quickly, takes constructive feedback on performance, stays focused on the job with attention to detail and produces desired outcomes.
• Proven knowledgeable and experience developing and implementing a Security Operation Center.
• Ability to quickly assimilate information.
• Strong process and technology analysis skills.
• Ability to collaborate with individuals at all organizational levels, skills, and experiences to build relationships and achieve organizational goals.
• Ability to prioritize and balance multiple and sometimes competing projects, priorities, or objectives.
• Goals and details oriented.
• Demonstrated leadership attributes.
• Able to write and speak in a manner that clearly and concisely communicates sometimes complex concepts to individuals at all organizational levels.
• Strong negotiation skills to work with product and service providers or reach consensus with constituents.

License or Registration Requirements: CISSP or CISM required upon hire date.

Travel Requirements: Up to 10% domestic US travel (depending on projects).

This opportunity provides the following:

• Challenging and rewarding work environment
• Growth and development opportunities within UHS and its subsidiaries
• Competitive Compensation
• Excellent Medical, Dental, Vision and Prescription Drug Plan
• 401k plan with company match
• Generous Paid Time Off

*UHS is a registered trademark of UHS of Delaware, Inc., the management company for Universal Health Services, Inc. and a wholly-owned subsidiary of Universal Health Services, Inc. Universal Health Services, Inc. is a holding company and operates through its subsidiaries including its management company, UHS of Delaware, Inc. All healthcare and management operations are conducted by subsidiaries of Universal Health Services, Inc. To the extent any reference to "UHS or UHS facilities" on this website including any statements, articles or other publications contained herein relates to our healthcare or management operations it is referring to Universal Health Services' subsidiaries including UHS of Delaware. Further, the terms "we," "us," "our" or "the company" in such context similarly refer to the operations of Universal Health Services' subsidiaries including UHS of Delaware. Any employment referenced in this website is not with Universal Health Services, Inc. but solely with one of its subsidiaries including but not limited to UHS of Delaware, Inc.

UHS is not accepting unsolicited assistance from search firms for this employment opportunity. Please, no phone calls or emails. All resumes submitted by search firms to any employee at UHS via-email, the Internet or in any form and/or method without a valid written search agreement in place for this position will be deemed the sole property of UHS. No fee will be paid in the event the candidate is hired by UHS as a result of the referral or through other means.

EEO Statement

All UHS subsidiaries are committed to providing an environment of mutual respect where equal employment opportunities are available to all applicants and teammates. UHS subsidiaries are equal opportunity employers and as such, openly support and fully commit to recruitment, selection, placement, promotion and compensation of individuals without regard to race, color, religion, age, sex (including pregnancy, gender identity, and sexual orientation), genetic information, national origin, disability status, protected veteran status or any other characteristic protected by federal, state or local laws.

We believe that diversity and inclusion among our teammates is critical to our success.

Notice

At UHS and all our subsidiaries, our Human Resources departments and recruiters are here to help prospective candidates by matching skillset and experience with the best possible career path at UHS and our subsidiaries. We take pride in creating a highly efficient and best in class candidate experience. During the recruitment process, no recruiter or employee will request financial or personal information (Social Security Number, credit card or bank information, etc.) from you via email. The recruiters will not email you from a public webmail client like Hotmail, Gmail, Yahoo Mail, etc. If you are suspicious of a job posting or job-related email mentioning UHS or its subsidiaries, let us know by contacting us at: https://uhs.alertline.com or 1-800-852-3449.